diff --git a/.woodpecker/release-tag.yaml b/.woodpecker/release-tag.yaml
index 9e7a16f..9051142 100644
--- a/.woodpecker/release-tag.yaml
+++ b/.woodpecker/release-tag.yaml
@@ -29,7 +29,7 @@ when:
 
 steps:
   - name: Get git token from OpenBao
-    image: quay.io/openbao/openbao:2.5.5
+    image: quay.io/openbao/openbao:2.6.1
     environment:
       VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
       ROLE_ID:
@@ -72,7 +72,7 @@ steps:
       - git push "https://woodpecker:$GIT_TOKEN@gitea.lumpiasty.xyz/lumpiasty/mikrotik-tailscale.git" "$TAG"
       - echo "Pushed $TAG"
   - name: Invalidate OpenBao token
-    image: quay.io/openbao/openbao:2.5.5
+    image: quay.io/openbao/openbao:2.6.1
     environment:
       VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
     commands:
diff --git a/.woodpecker/release.yaml b/.woodpecker/release.yaml
index 46cc695..e3f50ba 100644
--- a/.woodpecker/release.yaml
+++ b/.woodpecker/release.yaml
@@ -25,7 +25,7 @@ when:
 
 steps:
   - name: Get registry creds from OpenBao
-    image: quay.io/openbao/openbao:2.5.5
+    image: quay.io/openbao/openbao:2.6.1
     environment:
       VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
       ROLE_ID:
@@ -57,7 +57,7 @@ steps:
       # Credentials (PLUGIN_USERNAME / PLUGIN_PASSWORD) come from OpenBao.
       env_file: /woodpecker/registry.env
   - name: Invalidate OpenBao token
-    image: quay.io/openbao/openbao:2.5.5
+    image: quay.io/openbao/openbao:2.6.1
     environment:
       VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
     commands:
diff --git a/.woodpecker/renovate.yaml b/.woodpecker/renovate.yaml
index efab66b..5d8afa5 100644
--- a/.woodpecker/renovate.yaml
+++ b/.woodpecker/renovate.yaml
@@ -30,7 +30,7 @@ skip_clone: true
 
 steps:
   - name: Get renovate token from OpenBao
-    image: quay.io/openbao/openbao:2.5.5
+    image: quay.io/openbao/openbao:2.6.1
     environment:
       VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
       ROLE_ID:
@@ -76,7 +76,7 @@ steps:
       - export GITHUB_COM_TOKEN=$(cat /woodpecker/github_com_token)
       - /usr/local/sbin/renovate-entrypoint.sh renovate
   - name: Invalidate OpenBao token
-    image: quay.io/openbao/openbao:2.5.5
+    image: quay.io/openbao/openbao:2.6.1
     environment:
       VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
     commands: